A feature must be enabled for a controlled subset of users without rebuilding the container image. Which approach fits?

1. A supported feature flag and targeting or other appropriate filter integrated with the app
2. Disable the user's authorization checks
3. Change the container digest for every user interaction
4. A branch rename without runtime integration